Approved changes feed: RSS · Atom
cpe:2.3:a:pgpool_global_development_group:pgpool-ii:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pgpool Global Development Group (b26fc593-3c93-5cb9-a3db-8f114ee924c8) |
|---|---|
| Product | Pgpool Ii (c1145db5-848b-54ac-b2fc-0bbaa741b6c2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-46801 |
vulnerable | 2026-06-08 07:27:08.882662 |
Details available
CRITICAL (9.8)
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.
Published: 2025-05-19T07:14:45.304Z
Updated: 2025-11-03T17:44:50.344Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45624 |
vulnerable | 2026-06-08 06:48:08.748246 |
Details available
Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.
Published: 2024-09-12T04:33:40.437Z
Updated: 2025-11-03T22:16:02.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22332 |
vulnerable | 2026-06-08 05:54:24.675021 |
Details available
Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user's authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-11-03T21:47:15.461Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.